Decentralized processing of interactions on delivery

Abstract

A method includes generating, by a user device, an initial authorization request message for an interaction to obtain a resource from a resource provider. The user device transmits the initial authorization request message to a first node in a proxy network, wherein the first node processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message, the second node being previously associated with the resource provider. The user device then receives from the second node and stores a pre-authorization approval indicator (PAAI). Upon delivery of the resource by an agent of the resource provider, the user device transmits an authorization request message including the pre-authorization approval indicator, wherein the agent device further processes and transmits the authorization request message to the proxy network for authorization by an authorizing entity.

What is claimed is: 
     
       1. A method comprising:
 generating, by a user device operated by a user, an initial authorization request message for an interaction to obtain a resource from a resource provider; 
 transmitting, by the user device to a first node in a proxy network, the initial authorization request message, wherein the first node subsequently processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message; 
 receiving, by the user device from the second node in the proxy network, a pre-authorization approval indicator (PAAI); 
 storing, by the user device, the pre-authorization approval indicator; and 
 providing, by the user device to an agent device of an agent of the resource provider, the pre-authorization approval indicator, wherein the agent device further processes and transmits an authorization request message comprising the pre-authorization approval indicator to the proxy network for authorization by an authorizing entity, 
 wherein the initial authorization request message comprises an interaction identifier, user data and an authorization capsule, the authorization capsule being associated with the authorizing entity and comprising risk policies, encrypted credentials of the user, a plurality of re-encryption keys respectively associated with nodes in the proxy network, and a plurality of node identifiers respectively associated with the re-encryption keys. 
 
     
     
       2. The method of  claim 1 , further comprising:
 communicating, by the user device with a resource provider interface of the resource provider, and wherein the interaction identifier was obtained based on detecting a quick response (QR) code presented by the resource provider interface. 
 
     
     
       3. The method of  claim 1 , wherein the first node performs authentication using the user data and the risk policies in the authorization capsule. 
     
     
       4. The method of  claim 3 , wherein the first node
 determines a re-encryption key of the plurality of re-encryption keys using the interaction identifier and the node identifiers in the authorization capsule, the re-encryption key associated with the second node of the proxy network; and 
 re-encrypts, using the re-encryption key associated with the second node, the encrypted credentials to form re-encrypted credentials, 
 wherein the routing message comprises the re-encrypted credentials. 
 
     
     
       5. The method of  claim 4 , wherein the second node decrypts the re-encrypted credentials using a secret key of the second node to obtain plaintext credentials, and then generates and transmits a pre-authorization request message to the authorizing entity for approval, wherein the pre-authorization request message requests pre-authorization for the interaction. 
     
     
       6. The method of  claim 1 , wherein the method further comprises:
 receiving the authorization capsule from the authorizing entity. 
 
     
     
       7. The method of  claim 1 , wherein the agent is a delivery agent. 
     
     
       8. The method of  claim 1 , wherein the user device is a mobile phone. 
     
     
       9. The method of  claim 1 , wherein the agent device is a mobile phone. 
     
     
       10. The method of  claim 1 , wherein the interaction identifier was obtained from the resource provider, which obtained the interaction identifier from the proxy network. 
     
     
       11. The method of  claim 1 , wherein the encrypted credentials comprise an encrypted primary account number. 
     
     
       12. A method comprising:
 generating, by a user device operated by a user, an initial authorization request message for an interaction to obtain a resource from a resource provider; 
 transmitting, by the user device to a first node in a proxy network, the initial authorization request message, wherein the first node subsequently processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message; 
 receiving, by the user device from the second node in the proxy network, a pre-authorization approval indicator (PAAI); 
 storing, by the user device, the pre-authorization approval indicator; and 
 providing, by the user device to an agent device of an agent of the resource provider, the pre-authorization approval indicator, wherein the agent device further processes and transmits an authorization request message comprising the pre-authorization approval indicator to the proxy network for authorization by an authorizing entity, and wherein the method further comprises: 
 communicating, by the user device with a resource provider interface of the resource provider, and wherein the initial authorization request message comprises an interaction identifier that was obtained based on detecting a quick response (QR) code presented by the resource provider interface, and 
 wherein the QR code is a first QR code, and wherein upon delivery of the resource by the agent, the user device presents a second QR code to the agent device, the second QR code derived based on the pre-authorization approval indicator, and wherein the agent device processes and transmits the authorization request message after the agent device detects the second QR code. 
 
     
     
       13. A method comprising:
 generating, by a user device operated by a user, an initial authorization request message for an interaction to obtain a resource from a resource provider; 
 transmitting, by the user device to a first node in a proxy network, the initial authorization request message, wherein the first node subsequently processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message; 
 receiving, by the user device from the second node in the proxy network, a pre-authorization approval indicator (PAAI); 
 storing, by the user device, the pre-authorization approval indicator; and 
 providing, by the user device to an agent device of an agent of the resource provider, the pre-authorization approval indicator, wherein the agent device further processes and transmits an authorization request message comprising the pre-authorization approval indicator to the proxy network for authorization by an authorizing entity, and wherein the method further comprises: 
 communicating, by the user device with a resource provider interface of the resource provider, and wherein the initial authorization request message comprises an interaction identifier that was obtained based on detecting a quick response (QR) code presented by the resource provider interface, and 
 wherein the initial authorization request message comprises user data and an authorization capsule, the authorization capsule being associated with the authorizing entity and comprising risk policies, encrypted credentials of the user, a plurality of re-encryption keys respectively associated with nodes in the proxy network, and a plurality of node identifiers respectively associated with the re-encryption keys, wherein the user data comprises user authentication data or user device authentication data. 
 
     
     
       14. A user device comprising:
 a processor; and 
 a non-transitory computer readable medium comprising code executable by the processor to implement operations comprising: 
 generating an initial authorization request message for an interaction to obtain a resource from a resource provider, 
 transmitting, to a first node in a proxy network, the initial authorization request message, wherein the first node subsequently processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message, 
 receiving, from the second node in the proxy network, a pre-authorization approval indicator (PAAI), 
 storing the pre-authorization approval indicator, and 
 providing, to an agent device of an agent of the resource provider, the pre-authorization approval indicator, wherein the agent device further processes and transmits an authorization request message comprising the pre-authorization approval indicator to the proxy network for authorization by an authorizing entity, 
 wherein the initial authorization request message comprises an interaction identifier, user data and an authorization capsule, the authorization capsule being associated with the authorizing entity and comprising risk policies, encrypted credentials of a user, a plurality of re-encryption keys respectively associated with nodes in the proxy network, and a plurality of node identifiers respectively associated with the re-encryption keys. 
 
     
     
       15. The user device of  claim 14 , wherein the user device is a mobile phone. 
     
     
       16. The user device of  claim 14 , wherein the operations further comprise:
 communicating, with a resource provider interface of the resource provider, and wherein the interaction identifier was obtained based on detecting a quick response (QR) code presented by the resource provider interface. 
 
     
     
       17. The user device of  claim 14 , wherein the interaction identifier was obtained from the resource provider, which obtained the interaction identifier from the proxy network. 
     
     
       18. The user device of  claim 14 , wherein the operations further comprise:
 receiving the authorization capsule from the authorizing entity. 
 
     
     
       19. A system comprising:
 a proxy network; 
 a user device comprising:
 a processor, and 
 a non-transitory computer readable medium comprising code executable by the processor to implement operations comprising: 
 generating an initial authorization request message for an interaction to obtain a resource from a resource provider, 
 transmitting, to a first node in the proxy network, the initial authorization request message, wherein the first node subsequently processes the initial authorization request message and transmits a routing message to a second node in the proxy network based on the processing of the initial authorization request message; 
 receiving, from the second node in the proxy network, a pre-authorization approval indicator (PAAI), 
 storing the pre-authorization approval indicator, and 
 providing, to an agent device of an agent of the resource provider, upon delivery of the resource by the agent, the pre-authorization approval indicator, wherein the agent device further processes and transmits an authorization request message comprising the pre-authorization approval indicator to the proxy network for authorization by an authorizing entity, 
 wherein the initial authorization request message comprises an interaction identifier, user data and an authorization capsule, the authorization capsule being associated with the authorizing entity and comprising risk policies, encrypted credentials of a user, a plurality of re-encryption keys respectively associated with nodes in the proxy network, and a plurality of node identifiers respectively associated with the re-encryption keys. 
 
 
     
     
       20. The system of  claim 19 , wherein the resource provider operates a resource provider computer, and the system further comprises the resource provider computer.